Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/pNZcQDMQ_-fBUmz0_GPej3YRXSE.roa
File: pNZcQDMQ_-fBUmz0_GPej3YRXSE.roa (raw, json)
Hash identifier: R9ZF16IhMehBzDdIBjevC2bk13A0bCZkijyk0bQ61Bc=
Subject key identifier: A4:D6:5C:40:33:10:FF:E7:C1:52:6C:F4:FC:63:DE:8F:76:11:5D:21
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 365CD0C6
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/pNZcQDMQ_-fBUmz0_GPej3YRXSE.roa
Signing time: Mon 07 Feb 2022 11:25:56 +0000
ROA not before: Mon 07 Feb 2022 11:25:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 188.123.160.0/19 maxlen: 24
82.212.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912052422 (0x365cd0c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Feb 7 11:25:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4d65c403310ffe7c1526cf4fc63de8f76115d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:37:2c:78:85:b9:13:da:f7:c2:a9:d1:70:
6d:11:db:1e:21:87:a0:43:5e:ea:d6:13:f6:d4:c9:
a4:c7:1d:a9:93:e7:b5:11:ca:18:96:47:02:92:e1:
ab:ce:98:2e:6d:a3:3d:44:8f:23:5d:4b:2f:64:39:
48:eb:94:1a:eb:e7:65:ca:9d:6a:8d:1e:b3:66:9d:
c6:f1:44:d4:2f:8d:99:49:17:00:69:83:d6:44:34:
f8:6f:16:84:e7:6d:ce:72:5b:7d:1a:06:04:76:1b:
9d:f8:ab:ac:31:67:f2:06:ba:71:f5:be:f4:57:fa:
bb:73:34:09:4a:b8:86:5e:84:f7:bb:f0:a1:61:f1:
81:ce:25:39:93:39:ce:5e:e9:ee:d0:83:a6:27:0b:
ab:3d:15:79:d5:f5:7d:31:ed:38:98:43:02:55:16:
50:06:f1:45:21:7d:e6:52:14:3d:92:5f:4b:c0:1d:
82:33:86:1d:b4:3d:4b:c0:84:2b:18:5a:cf:46:73:
c3:6e:5a:82:fd:06:c3:91:92:8c:13:f7:e2:59:6e:
83:29:a6:c0:2d:4e:61:be:97:c4:a5:f3:ca:c8:0a:
26:57:65:41:2f:01:90:8d:f0:5c:38:17:89:c6:c8:
1a:3e:f0:5e:56:92:b9:be:df:98:77:69:55:8e:43:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:5C:40:33:10:FF:E7:C1:52:6C:F4:FC:63:DE:8F:76:11:5D:21
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/pNZcQDMQ_-fBUmz0_GPej3YRXSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.64.0/18
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:12:97:11:f8:3a:3f:09:ba:f0:be:e6:d4:1a:57:22:55:cd:
af:e3:c4:a1:a1:93:63:0e:69:b4:7f:f2:b8:42:7f:c0:c0:f6:
89:04:d5:d6:b8:ac:e3:24:f2:85:eb:db:96:2b:3f:05:ae:80:
60:f5:6e:06:8c:b5:6e:2b:28:d9:5e:4c:95:29:86:24:b8:2b:
0d:dd:2d:d9:16:9d:ba:db:92:ff:1e:39:87:42:b1:f1:77:89:
67:b1:b4:18:fb:59:dd:4d:28:66:05:d9:6b:91:9a:62:40:3e:
08:62:b9:4b:89:0a:68:90:ba:b8:8c:47:da:ec:21:6f:07:9c:
0b:d7:d5:0d:6a:45:2c:d5:81:e0:eb:b3:e7:d0:1d:a4:fa:b2:
ce:c2:12:90:76:d4:ee:a0:33:9f:71:24:46:25:61:67:fe:0e:
28:b2:55:dc:ef:a7:3b:78:86:12:43:df:dd:39:23:70:1b:38:
b9:db:a0:da:00:3a:a6:0a:8a:ae:76:d9:ae:2f:5b:48:48:fb:
3e:09:aa:89:10:2d:5b:b2:df:56:41:15:02:53:18:ce:97:22:
5c:8d:8b:24:1a:4f:79:15:b8:0d:4f:a4:96:67:f5:e4:ad:1c:
8e:8d:87:d8:cd:89:78:d6:dd:9f:fd:ab:6b:88:89:02:e9:ed:
b5:64:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:31 2023 by rpki-client on console-ams.rpki-client.org